Job Application for Detection Engineering Lead at Dropzone AI

New

About Dropzone AI

Dropzone’s mission is to scale cybersecurity beyond human limits, and augment every single human security engineer/analyst with an army of AI security specialists. Humans alone cannot sufficiently protect our digital future, and AI augmentation is the only way for defenders to reclaim the high ground. We are an award winning company disrupting the $200B+ cybersecurity market.

Powered by Gen AI advancements, our technology offloads repetitive day-to-day work and frees human analysts to focus on real threats and higher-value projects. We are venture-backed, and our team has a rare blend of deep experience across cybersecurity, AI/ML, and SaaS product development. Join us if you want to be on the ground floor of using Gen AI to transform cyber defense. Learn more at www.dropzone.ai.

About the role

We're looking for a highly experienced Senior / Principal Detection Engineer to help shape the future of AI-driven security operations. This is a senior-to-principal level role for an individual who combines deep detection engineering expertise with a passion for innovation, customer impact, and advancing the state of security operations.

As the Detection Engineering Lead, you will serve as one of Dropzone AI's foremost experts in adversary tradecraft, threat detection, detection efficacy evaluation, and SIEM content. You will work closely with product management and engineering teams to ensure our AI detection engineer can draft new detection contents and improve existing detection rules as well as the best detection engineer on the planet.

This role is part of the R&D team and you will focus on building the best software that replicates your expert intuitions and techniques. This is not a service or consulting role and you will not be performing hands-on detection engineering service to our customers.

What you'll do

Detection Engineering Leadership

Reimagine how having unlimited detection engineering capacity could change Detection and Response teams and how future security practitioners interact with an AI detection engineer
Prototype, validate, and continuously improve an AI agent that programmatically generates detection content across diverse security environments.
Experiment autonomous agentic loops between detection engineering and other D&R functions such as threat intelligence and threat hunting

Product Development

Partner with engineering teams to encode expert detection knowledge into our product.
Design scoring rubrics on AI generated detection content for SIEM, EDR, NDR, cloud, identity, and SaaS security platforms.
Provide guidance on detection methodologies used by mature SOCs.
Establish best practices for detection quality, tuning, testing, and lifecycle management.
Influence product roadmap decisions based on customer and operational needs.

Threat Research & Innovation

Stay current on emerging threats, attacker techniques, and defensive strategies.
Conduct original research into detection opportunities and gaps.
Develop novel approaches for AI-assisted threat detection.

Requirements

5+ years of experience in detection engineering.
Deep expertise with two or more major SIEM platforms (Microsoft Sentinel, Splunk, QRadar, Elastic, Chronicle, Sumo Logic, etc.).
Strong understanding of endpoint, cloud, identity, network, and SaaS telemetry.
Expertise in MITRE ATT&CK, adversary emulation, and detection coverage analysis.
Experience building and tuning high-fidelity detections at scale.
Strong understanding of modern attacker tradecraft across Windows, Linux, cloud, identity, and SaaS environments.
Excellent communication skills with the ability to engage practitioners, executives, and customers.
Early-stage startup mindset. You thrive on ambiguity and move with lightspeed execution
Being data-driven is part of your DNA.

Preferred

Experience leading detection engineering programs at large complex environments.
Expertise with EDR platforms such as CrowdStrike, Microsoft Defender, SentinelOne, or Palo Alto Cortex XDR.
Experience with cloud security platforms including AWS, Azure, and GCP.
Familiarity with AI, machine learning, LLMs, or autonomous security workflows.
Experience contributing to open-source detection content (Sigma, YARA, Suricata, Zeek, etc.).
Public speaking, research publication, or conference presentation experience.

Work Environment/Travel

We are a 100% remote company where you will work from your home with company-provided equipment to set you up for success. Semi-frequent travel to professional office settings and other events locally and nationally; some overnight travel expected.

Compensation

In the spirit of pay transparency, we are excited to share the base salary range below, exclusive of fringe benefits or potential bonuses. If you are hired at Dropzone your final base salary compensation will be determined based on factors such as geographic location, skills, education, and/or experience. In addition to those factors, we believe in the importance of pay equity and consider internal equity of our current team members as a part of any final offer. Please keep in mind that hiring at the maximum of the range would not be typical to allow for future and continued salary growth. In addition, all compensation packages include significant above market new hire equity grants because we believe in rewarding long term value creation. We also offer a generous benefits package, including company paid health insurance, 401K Plan with employer match, Self-Managed PTO, parental leave, and more.

The pay range for this role is:

$200,000 - $250,000 USD

First Name

Last Name

Preferred First Name

Country

Phone

Location (City)

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Website

Are you legally authorized to work in the United States?

Select...

Do you now or in the future require any type of sponsorship to work in the United States?

Select...

In what US state do you currently reside?

Select...

What are you targeting in terms of a base salary?

Please list which SIEM platforms you would rate yourself as having deep expertise in.

Policy on the Use of Artificial Intelligence (AI): At Dropzone, we require all job applicants to provide authentic, human-generated content throughout the entire application and interviewing process. The use of generative AI tools or AI assistance to create, draft, edit, or significantly modify application materials (including resumes, cover letters, writing and code samples, and answers to screening questions) or during any interview stage is strictly prohibited. This policy is in place to evaluate your non-AI-assisted communication skills, original thought, and genuine qualifications for the position. Acknowledgment and Agreement: By selecting "I Agree" below and submitting this application, I acknowledge that I have read and understood Dropzone's policy prohibiting the use of AI in the application and interviewing process. I attest that all materials submitted and all responses provided during the application and interview process are my own original work and were not generated or substantially assisted by any AI tool. I understand that if I have used AI in any part of the process, I am required to disclose the extent and nature of that use to Dropzone in advance. I further understand and agree that any failure to disclose the use of AI, or any violation of this policy, is a material misrepresentation and is grounds for immediate removal from consideration or, if hired, for immediate termination of employment, regardless of when the violation is discovered.

Select...

I acknowledge that falsifying information during my application and interview process may result in exclusion from hire with Dropzone or employment termination.

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Dropzone AI’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Select...

Are you Hispanic/Latino?

Select...

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Select...

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Detection Engineering Lead

Detection Engineering Leadership

Product Development

Threat Research & Innovation

Preferred

Apply for this job

Voluntary Self-Identification

Voluntary Self-Identification of Disability